WHAT IS CLAIMED IS: 

1 1. A data processing node configured to participate in global transactions 

2 comprising: 

3 A) a transaction processing application operating within a global transaction 

4 processing protocol incorporating a two-phase commit procedure; 

5 B) coupling means to at least one other data processing node operating 

6 within the global transaction processing protocol for information exchange 

7 therewith; 

!;r3 C) a memory storing database files subject to access during transaction 
processing; 
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JP D ) a database access application communicating with the transaction 

if 

P processing application to address files stored in the memory and transfer 

IJ2 data between the transaction processing application and the memory; 

j »S E) a file management system having exclusive access to reserved locations 

1 4 in the memory for reading and writing meta-data therein; 

15 F) physical file access logic selectively coupling the memory and the 

16 database access application, the physical file access logic incorporating file 

1 7 protections which are controlled by the file management system; and 

18 G) node recovery means for recovering following a system failure which 

19 occurs during transaction processing on a database stored in said memory 

22 



20 and faithfully rebuilding, after restart, the data processing node to the state 

21 immediately prior to the failure; said node recovery means including: 

22 1) means to remove the results of incomplete non-"in-doubt" 

23 transactions; 

24 2) means to lock files which have been updated by "in-doubt" 

25 transactions; and 

26 3) means for permitting normal access to the database after the 
21 operations carried out by the means set forth in subparagraphs G)l) 
l8 and G)2) have completed. 
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%}l 2. The data processing node of Claim 1 in which the meta-data for each file stored 

ii; 

j{j2 in memory during transaction processing includes an undo log, and the undo log 

W3 entry for each file affected by a data processing node failure is accessed after 

ill 

4 restart to provide information essential to rebuilding the state of the transaction at 

5 the data processing node at the time of the failure. 

1 3. The data processing node of Claim 1 in which the rebuild effected is to the "in- 

2 doubt" state. 
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1 4. The data processing node of Claim 2 in which the rebuild effected is to the "in- 

2 doubt" state. 



1 5. The data processing node of Claim 2 in which "recovery-needed", "recovery- 

2 done" and "in-doubt" counts are normally maintained in individual file description 

3 records and in which, in the event of a data processing node failure as evidenced 

4 by a difference between the BSI of the current system boot and the BSI as 
, 5 recorded in the file description record: 

Q6 A) if the node failure occurs when there is a non-zero "in-doubt" count, 
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TV then, during restart: 

118 1) if the "recovery-needed" is non-zero, both the "recovery-done" and 

nB "in-doubt" counts are cleared; and 

l §0 2) if the "recovery-needed" is zero and the "in-doubt" is non-zero, the 

! ^1 

11 original "recovery-needed" count is reinstated. 



1 6. The data processing node of Claim 5 in which the rebuild effected is to the "in- 

2 doubt" state. 
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